Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/Qo0eoYBezFZCaIAncDXz3Lt1uko.roa
File: Qo0eoYBezFZCaIAncDXz3Lt1uko.roa (raw, json)
Hash identifier: V/1LDChNTRtEJQrr/aUtJon2bSNF2OWuCyKsv5g0jq8=
Subject key identifier: 42:8D:1E:A1:80:5E:CC:56:42:68:80:27:70:35:F3:DC:BB:75:BA:4A
Certificate issuer: /CN=48559018adff16eadf5551b2cb74d8f6860cd044
Certificate serial: 018CC7947D7E75A604195C3E82D62860B1E5
Authority key identifier: 48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/Qo0eoYBezFZCaIAncDXz3Lt1uko.roa
Signing time: Tue 02 Jan 2024 00:30:46 +0000
ROA not before: Tue 02 Jan 2024 00:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 91.202.188.0/22 maxlen: 24
45.10.4.0/22 maxlen: 24
45.141.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:7d:7e:75:a6:04:19:5c:3e:82:d6:28:60:b1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48559018adff16eadf5551b2cb74d8f6860cd044
Validity
Not Before: Jan 2 00:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=428d1ea1805ecc56426880277035f3dcbb75ba4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:dc:78:98:6d:19:10:45:77:7f:9f:9d:6c:
7c:44:e2:04:e3:20:6b:c1:05:3b:9e:8b:c5:fb:24:
60:b7:74:f6:ca:46:4c:48:f0:8a:37:90:af:34:65:
12:cb:00:ba:23:14:9c:91:de:9b:1c:3a:1f:c9:7f:
97:f7:36:2e:75:c3:1a:d9:e6:6e:b4:8f:16:4e:29:
e5:37:50:93:1a:13:60:93:a4:25:20:e4:37:2a:be:
d8:3d:97:30:ca:f4:82:41:bd:46:12:bd:c1:9e:39:
86:0f:ce:03:df:02:c4:85:36:f1:5a:2b:30:ab:97:
0b:64:2e:b2:17:9b:7c:b1:23:1e:d1:1f:d3:f1:aa:
e6:96:d8:97:f7:fe:a5:0b:e3:72:69:bf:16:2f:51:
d4:c1:64:ff:60:70:c0:f5:b4:ef:a5:3f:3c:4a:82:
ec:5b:1f:50:ac:19:14:d6:cb:92:40:c6:65:b8:f1:
de:96:54:57:72:6f:0c:81:11:d2:6f:7d:db:12:23:
30:cd:05:6c:72:d2:c6:2e:94:9c:96:c2:fa:17:83:
14:24:97:9b:ee:82:2f:d9:f0:8d:42:54:2d:c0:5e:
2e:42:b2:e7:f0:43:93:42:80:4c:ab:b5:cf:94:a5:
0c:99:94:9a:cb:4b:50:1a:92:7e:3a:38:c4:af:a0:
4a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8D:1E:A1:80:5E:CC:56:42:68:80:27:70:35:F3:DC:BB:75:BA:4A
X509v3 Authority Key Identifier:
keyid:48:55:90:18:AD:FF:16:EA:DF:55:51:B2:CB:74:D8:F6:86:0C:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFWQGK3_FurfVVGyy3TY9oYM0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/Qo0eoYBezFZCaIAncDXz3Lt1uko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ef56d2-632e-4816-a9ca-ab45e60071e2/1/SFWQGK3_FurfVVGyy3TY9oYM0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.4.0/22
45.141.64.0/22
91.202.188.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:ce:0b:fb:10:fa:1f:06:f2:59:3e:9a:3e:0b:56:c7:60:7f:
f7:0d:15:0c:99:65:9f:4a:57:4b:a4:f4:03:80:f6:fb:76:6a:
18:56:40:40:e0:92:ee:c7:ea:23:d9:42:b2:72:a3:0e:f3:d7:
79:22:4e:30:b2:bb:95:de:ad:e9:07:b8:74:bf:bd:00:f6:71:
7f:0d:b5:cb:24:d0:2a:4f:54:4e:5b:14:e5:92:04:b7:17:82:
fc:4b:b6:74:54:09:d2:9d:23:41:73:69:fc:94:f0:e6:ab:56:
41:92:71:90:98:ce:c2:f5:fd:de:3a:bd:8d:d1:c2:14:91:e5:
4c:e3:0c:1d:15:8e:e5:f5:4d:74:65:e0:9f:af:a4:19:9b:95:
ea:4a:35:25:50:d5:9d:ab:5f:f3:cb:4b:1f:a1:0f:72:d9:45:
a7:73:92:7c:40:0a:bb:63:cd:c9:26:9a:ab:45:c5:eb:fd:aa:
a5:68:39:b5:5b:de:94:91:5a:73:53:74:c5:80:fe:36:a0:97:
60:f4:bf:e4:45:48:d9:50:0c:79:98:f3:2b:bd:11:85:bd:89:
40:1c:44:d3:af:b7:08:29:22:3a:dc:23:f6:9f:23:fc:67:fa:
68:34:d3:ed:d9:ab:d6:dd:da:ef:0c:c1:45:98:8e:bc:40:6c:
2f:01:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:55 2024 by rpki-client on console-ams.rpki-client.org